Security of client's private key

[GoogleCodeExporter]

ics-openvpn only saves the location to CA cert, server cert and server key. 
Since both certificates are public data, it's not an issue referring to them on 
the SD card. However, the server's private key must be protected from other 
apps as well as external access to SD card.

I propose saving all certificates and private key to app's private storage 
instead of only storing their locations. Another advantage of doing so is 
removing ics-openvpn's dependence on SD card to operate.

Original issue reported on code.google.com by [email protected] on 30 Sep 2012 at 6:43

[GoogleCodeExporter]

When you import the data it is stored inside the app's own storage. Also the 
FAQ on security.

Original comment by [email protected] on 30 Sep 2012 at 12:00

• Changed state: Invalid

[GoogleCodeExporter]

OK, so I missed the "import" button and the fact that it can be missed is an 
issue. I suggest to restrict the user to only allow "importing" the private key 
by disabling/removing the "select" button.

Original comment by [email protected] on 30 Sep 2012 at 12:08

[GoogleCodeExporter]

I don't like disabling the select option. There may be use cases which require 
the key on the file system. But I can make a warning dialog if the user selects 
"select"

Original comment by [email protected] on 1 Oct 2012 at 5:13

[GoogleCodeExporter]

Ye, a warning is a good way to do it.

Original comment by [email protected] on 2 Oct 2012 at 8:07

[GoogleCodeExporter]

Original comment by [email protected] on 8 Oct 2012 at 10:29

• Changed state: Accepted
• Added labels: Type-Enhancement
• Removed labels: Type-Defect

[GoogleCodeExporter]

hi，how to use the software apk， please 

Original comment by [email protected] on 3 Feb 2013 at 3:42

[GoogleCodeExporter]

@6 This has nothing to do with this bug. Please look at the FAQ.

Original comment by [email protected] on 3 Feb 2013 at 3:53

[GoogleCodeExporter]

The new version has a preselected "Import to configuration" check box.

Original comment by [email protected] on 10 Mar 2013 at 1:05

[GoogleCodeExporter]

Original comment by [email protected] on 9 Apr 2013 at 9:20

• Changed state: Fixed